Automated Task Created(At1.job)

BleepingComputer.com: Automated Task Created(At1.job)

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

Automated Task Created(At1.job)

#1 TKINX

New Member

Group: Members
Posts: 1
Joined: 07-December 10

Posted 07 December 2010 - 03:01 PM

Hi, I just noticed some weird program running in my pc, it shows up in task manager(dci_set.exe) and when I opened the folder I found it wasn't there(temp folder), also I found that it was running under task scheduler process(using process explorer), so I went to task scheduler and found a task called At1, set to run everyday and points to dci_set.exe, I removed the task(bad of me, should've just disabled it to analyze later) and its gone.

Also I have found a few strange services in my pc(random name) that has no file, so I disabled them, I use Avast Free AV 5.0677, also use Malwarebytes Anti-malware and spybot search and destroy regularly, use opera and firefox as primary browser. Also for firewall I have comodo firewall(no defense+), comdo is set to block all app unless I allow it through, only one port I have forwarded for uTorrent.

I always keep notice of programs running using process explorer, so this At1 got in the past few hours.

I just watched some videos(youtube), and installed some Firefox personas and a few firefox themes(from official site) when I noticed this, I cleared my temp folder, ran mbam and spybot s&d, also avast quick scan and picked up nothing.

Am I still infected? Is there any sure shot way to be find out? Also rootkit revealer does not run on my pc(win7 x32).

Thanks in advance.

PS: I posted and then removed the hijackthis log as its said in the forum rules, anyway I can post it if its needed.

This post has been edited by TKINX: 07 December 2010 - 03:04 PM